1
0
Fork 0
forked from svrjs/svrjs
Commit graph

176 commits

Author SHA1 Message Date
ba21f655a4 Replaced client in the block list error message with generic 403 Forbidden error message 2024-03-17 00:46:32 +01:00
28244bf2c5 Replace some instances of "blacklist" (racist?) with "block list" 2024-03-17 00:39:21 +01:00
37f3d1d2af Changed CVE-2024-22019 warning text 2024-03-17 00:35:44 +01:00
e638c5dc1a Added CVE-2024-22019 Node.JS vulnerability warning. 2024-03-13 03:00:56 +01:00
1e165dcc58 Fix wwwredirect function 2024-03-09 16:32:01 +01:00
52e729f51d Optimize HTTP/1.x compatiblity res.writeHead function 2024-03-09 16:10:41 +01:00
0e44109776 Change error handler for missing HTTP/2 pseudoheaders 2024-03-09 16:08:46 +01:00
7b0038754e Optimize HTTP/1.x compatibility header setting 2024-03-09 16:00:19 +01:00
6c8873ce3f Fix comparison optimized in the previous commit 2024-03-09 15:57:56 +01:00
4a24b9d892 Be case insensitive in header name exclusion in shimmed HTTP/1.x res.writeHead method 2024-03-09 15:57:30 +01:00
70444f3b48 Optimize missing header check 2024-03-09 15:50:36 +01:00
9f8b0f4fe3 Remove try/catch block in HTTP/1.x compatibility shim; errors there are non-existent 2024-03-09 15:48:23 +01:00
8ac546ff67 Be case insensitive in header name exclusion in shimmed HTTP/1.x res.setHeader method 2024-03-09 15:45:31 +01:00
9017b732cc Clean up the code. 2024-03-03 02:05:14 +01:00
c20aa3d7bc Completely rewrite HTTP to HTTPS redirect functionality 2024-03-03 00:01:17 +01:00
067d177321 Optimized some regular expressions 2024-03-02 22:57:27 +01:00
3a966d342a Added option to allow URLs with double slashes 2024-03-02 22:54:03 +01:00
47803c217b Fix URL rewriter always remove double slashes 2024-03-02 22:45:27 +01:00
cbbe4c9bc5 Fix errors with web root postfix adding functionality 2024-03-02 22:41:26 +01:00
0f0c1b22ab Prepare web root postfix adding functionality for double slash URL support 2024-03-02 22:21:49 +01:00
d633707ea5 Prevent redirect loops with fallback replacement 2024-03-02 22:11:50 +01:00
2f232614a2 Fix URL rewriting on URLs with double slashes 2024-03-02 22:02:24 +01:00
28d633884e Prepare for double slash URL support 2024-03-02 21:54:07 +01:00
bd5ab63954 Change lookahead token order in two URL sanitation regular expressions 2024-02-28 21:45:47 +01:00
ae630a1625 URL sanitizer function now uses less regular expression replacements. 2024-02-28 21:43:43 +01:00
b829414f4c Fixed bug with URLs beginning with multiple slashes being rewritten incorrectly. 2024-02-11 21:26:26 +01:00
2589eff15f Added new SVR.JS mod and server-side JavaScript variable: authUser. 2024-02-07 00:35:00 +01:00
9f15a08378 Add some code comments 2024-02-02 19:49:30 +01:00
d85dedea65 Clean up the code. 2024-02-02 19:32:40 +01:00
88e923ffbc Fixed SVR.JS crashes with X-SVR-JS-From-Main-Thread header and unspecified client request IPs 2024-02-02 19:23:45 +01:00
4d69f6f1a7 Add IP-based virtual hosts alongside hostname-based virtual hosts 2024-02-02 19:08:49 +01:00
ea228114e1 Head and foot inclusion is now returning 500 error in case of server error instead of server crash. 2024-01-24 19:48:50 +00:00
e172c2c005 Fix web root postfix prefix support 2024-01-24 19:06:00 +00:00
e29d1aa3aa Fix syntax error from previous commit. 2024-01-24 18:53:29 +00:00
5fdbc898d0 Add support for web root postfix prefixes. 2024-01-24 18:52:05 +00:00
6abe280ee8 Add support for web root postfixes (for every host) 2024-01-23 07:00:23 +01:00
6a9afcbc26 Add support for useClientCertificate, rejectUnauthorizedClientCertificates, cipherSuite, ecdhCurve, tlsMinVersion, tlsMaxVersion, signatureAlgorithms and http2Settings config.json properties. 2024-01-22 23:21:01 +01:00
1a2019664a Fixed error handling for invalid URL rewrite regexes. Also fixed bug with HTTP proxy not working. 2024-01-18 01:12:09 +01:00
60a84d879d Clean up the code (remove trailing spaces) 2024-01-14 19:01:49 +01:00
db6c4faeaf Mitigate log file injection vulnerability at mod file names. 2024-01-14 19:00:27 +01:00
e1e9338806 SVR.JS no longer crashes, when access to a log file is denied. 2024-01-14 09:00:08 +01:00
e11dd8d5b5 Mitigated log file injection for HTTP authentication 2024-01-14 08:41:11 +01:00
55dfa0ad1e Fixed typo that caused 500 error with 308 code redirects 2024-01-13 10:25:42 +01:00
9569c7b7fd Added support for 307 and 308 redirects (both in config.json and in redirect() SVR.JS API method) 2024-01-13 08:36:00 +01:00
03556813ec Reformatted the source code 2024-01-13 08:25:38 +01:00
1123f40961 Cleaned up the code 2024-01-13 08:09:32 +01:00
4179e4020c Dropped support for svrmodpack; SVR.JS LTS versions will still have svrmodpack support. 2024-01-13 08:01:05 +01:00
7e73cb68d3 Added support for skipping URL rewriting, when the URL refers to a file or a directory. 2024-01-13 07:53:16 +01:00
d942342106 Changed rewriteURL method to use callbacks. 2024-01-13 07:34:28 +01:00
7a6661b895 Fix searchHostname function 2023-12-30 23:43:07 +01:00